Qilin ransomware group lists fasse.com on its leak site

• Ransomware group: Qilin
• Country: Germany
• Sector: Technology
• Announcement date: June 11, 2025

The Qilin ransomware group has listed fasse.com, a company operating in the technology sector, on its leak site. The threat actor claims to have compromised data belonging to the organization and has published a leak announcement to support these claims.

The claimed attack and event details

According to the announcement made by the threat actor known as Qilin, the incident occurred on June 11, 2025. The group asserts that it has successfully exfiltrated the company's data. To support their claim, the group shared visual samples of documents that allegedly belong to the organization.

The provided screenshots display text describing the company's operations alongside various document samples. Notably, these document samples are marked with 'SECURE' watermarks. While these visual samples have been released, there is no detailed information regarding the full scope or the specific content of the leaked data. Furthermore, the group has not provided information regarding the total size of the data, the specific file count, or a ransom demand.

Affected data types

Based on the information provided by the threat actor, the following types of data are allegedly involved in the breach:

• Corporate documents

It is important to note that the group has not disclosed the full extent of the data exfiltrated beyond these general categories.

Organization profile

Fasse Valves is a company based in Germany that specializes in the production of precision motion control, hydraulic valves, and control systems. These products are designed for demanding industrial applications, including sectors such as agriculture, construction, and turf care.

Risk assessment and implications

This alleged leak may pose significant risks to the organization's operational continuity and its commercial reputation. Because the company is based in Germany, the exposure of personal or sensitive corporate information could lead to legal sanctions under the General Data Protection Regulation (GDPR).

The use of double extortion tactics by the Qilin group suggests that the risk of data publication or sale remains significant. Double extortion is a common ransomware tactic where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release unless a ransom is paid. This adds a layer of pressure on the victim, as the threat of data exposure remains even if systems are restored from backups.

Furthermore, it is possible that the leaked documents could be utilized by threat actors for supply chain attacks or targeted phishing campaigns. In such scenarios, stolen corporate information is leveraged to gain trust during social engineering attempts or to compromise interconnected business partners. To defend against such threats, organizations typically focus on robust data encryption, strict access controls, and continuous monitoring of network traffic to detect unauthorized exfiltration.